Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134322e302f32332d3234203d3e203237363639.roa
File:                     3230302e3130382e3134322e302f32332d3234203d3e203237363639.roa (raw, json)
Hash identifier:          4qQeRt8ELzq1SqqdykzHStYDZZ+uLejacEe50zKY5Vk=
Subject key identifier:   80:C5:6E:E0:30:7C:5F:3A:25:D1:16:7D:14:7C:08:F5:0E:68:56:C4
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       28AFC4C703F1EE31284685776F3E7D7037C15D83
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134322e302f32332d3234203d3e203237363639.roa
Signing time:             Tue 05 Mar 2024 18:00:09 +0000
ROA not before:           Tue 05 Mar 2024 17:55:09 +0000
ROA not after:            Tue 04 Mar 2025 18:00:09 +0000
asID:                     27669
IP address blocks:        200.108.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:af:c4:c7:03:f1:ee:31:28:46:85:77:6f:3e:7d:70:37:c1:5d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Mar  5 17:55:09 2024 GMT
            Not After : Mar  4 18:00:09 2025 GMT
        Subject: CN=80C56EE0307C5F3A25D1167D147C08F50E6856C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:53:5a:22:02:fc:d5:ea:c4:0d:db:69:49:
                    2d:9b:c7:6f:8c:55:2c:29:d1:e5:c7:af:b2:7d:75:
                    c6:39:8d:70:5d:86:86:d7:9e:63:26:3e:28:63:cc:
                    dd:66:2d:2c:db:47:cd:f4:9b:32:32:85:92:60:40:
                    f0:34:7c:81:cb:b0:e3:90:e7:0e:f1:17:13:00:4a:
                    0c:80:5b:7d:6e:9b:61:c9:b9:ff:4b:29:1b:52:7c:
                    78:f6:da:a9:fe:93:3c:37:88:44:4a:cb:76:cd:ff:
                    3a:39:86:0d:fe:5a:80:3e:52:06:4f:d3:b1:41:1a:
                    7b:0e:98:8a:3f:9a:a2:c5:1b:50:6f:87:21:ce:f5:
                    32:0d:74:22:90:a1:fb:67:db:57:5c:8a:60:20:ef:
                    26:2d:9b:9c:1d:38:4f:9d:91:0c:c0:db:7d:cf:09:
                    1e:82:34:b5:92:b8:b8:b7:bb:4f:f8:5f:6b:64:46:
                    31:76:43:77:ec:4c:91:d4:c2:93:df:e4:d8:63:67:
                    5c:c0:0e:c2:5f:d5:68:98:5a:f0:7c:7b:c6:11:b4:
                    b7:44:e9:01:93:20:0e:26:5f:55:05:f0:f3:3a:6c:
                    90:02:f3:7f:db:56:a2:02:ff:43:a3:26:c9:e9:c3:
                    5d:78:d2:95:4b:24:70:2b:7b:40:1a:11:cf:b0:0c:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:6E:E0:30:7C:5F:3A:25:D1:16:7D:14:7C:08:F5:0E:68:56:C4
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3134322e302f32332d3234203d3e203237363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:72:d6:47:6e:68:3f:70:dd:35:53:3d:89:8e:53:4b:db:0a:
         32:59:b2:37:d4:32:8f:53:5e:ad:5a:83:40:98:f8:91:51:58:
         2f:8b:62:df:4e:ed:8c:ba:28:be:c8:0b:a5:ff:6c:f8:bb:b4:
         15:ea:95:ed:5e:62:52:88:0d:f8:30:51:ed:af:81:5f:92:14:
         73:44:5d:f3:c9:30:07:33:69:83:97:df:8e:11:b8:5c:e2:48:
         41:ff:dd:c4:4d:1a:c5:f8:1f:32:9b:d6:46:59:c7:eb:de:45:
         45:22:20:7d:a9:65:de:85:0a:77:14:33:22:36:e4:12:2f:0b:
         32:13:04:d6:b7:6a:63:46:a8:69:ed:0c:ed:0a:a4:22:e1:6a:
         d4:1f:4d:58:ca:b8:78:38:e4:47:d4:46:f4:78:1f:ad:c1:52:
         52:03:1a:cb:d0:fa:3a:81:7d:46:ae:ae:69:e2:4c:c7:42:ea:
         f7:33:ce:b9:b5:0d:7f:4e:df:83:d5:46:40:98:4f:55:d7:87:
         da:fd:88:84:7d:8c:e6:81:13:d8:8e:43:17:95:69:35:30:ca:
         3f:00:05:40:4d:07:f5:e2:68:1f:f5:a5:44:37:69:bf:33:90:
         5e:61:81:49:68:6a:f8:4b:02:0e:ca:30:99:1b:ab:8a:5e:88:
         69:f1:ae:c7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKK/ExwPx7jEoRoV3bz59cDfBXYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMERCMjU4MjBFOTFCQTM1MjhEMTA5QkM0OTdEMzQ4
QUYxQ0M4RTAeFw0yNDAzMDUxNzU1MDlaFw0yNTAzMDQxODAwMDlaMDMxMTAvBgNV
BAMTKDgwQzU2RUUwMzA3QzVGM0EyNUQxMTY3RDE0N0MwOEY1MEU2ODU2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKb1NaIgL81erEDdtpSS2bx2+M
VSwp0eXHr7J9dcY5jXBdhobXnmMmPihjzN1mLSzbR830mzIyhZJgQPA0fIHLsOOQ
5w7xFxMASgyAW31um2HJuf9LKRtSfHj22qn+kzw3iERKy3bN/zo5hg3+WoA+UgZP
07FBGnsOmIo/mqLFG1BvhyHO9TINdCKQoftn21dcimAg7yYtm5wdOE+dkQzA233P
CR6CNLWSuLi3u0/4X2tkRjF2Q3fsTJHUwpPf5NhjZ1zADsJf1WiYWvB8e8YRtLdE
6QGTIA4mX1UF8PM6bJAC83/bVqIC/0OjJsnpw1140pVLJHAre0AaEc+wDLCnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgMVu4DB8Xzol0RZ9FHwI9Q5oVsQwHwYDVR0j
BBgwFoAUzRDbJYIOkbo1KNEJvEl9NIrxzI4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDhGMzYwMEMwODExNjRFRTg3REIwOEVEM0U4QjQ4RDIz
RTE4NjZEQjJBREQyMUE4RkI4OTkxOUIzQjc0QzA1LzAvQ0QxMERCMjU4MjBFOTFC
QTM1MjhEMTA5QkM0OTdEMzQ4QUYxQ0M4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDEwREIyNTgyMEU5MUJBMzUy
OEQxMDlCQzQ5N0QzNDhBRjFDQzhFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ4RjM2MDBDMDgxMTY0RUU4N0RCMDhFRDNFOEI0OEQyM0UxODY2REIy
QUREMjFBOEZCODk5MTlCM0I3NEMwNS8wLzMyMzAzMDJlMzEzMDM4MmUzMTM0MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzYzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByGyO
MA0GCSqGSIb3DQEBCwUAA4IBAQBpctZHbmg/cN01Uz2JjlNL2woyWbI31DKPU16t
WoNAmPiRUVgvi2LfTu2Muii+yAul/2z4u7QV6pXtXmJSiA34MFHtr4FfkhRzRF3z
yTAHM2mDl9+OEbhc4khB/93ETRrF+B8ym9ZGWcfr3kVFIiB9qWXehQp3FDMiNuQS
LwsyEwTWt2pjRqhp7QztCqQi4WrUH01Yyrh4OORH1Eb0eB+twVJSAxrL0Po6gX1G
rq5p4kzHQur3M865tQ1/Tt+D1UZAmE9V14fa/YiEfYzmgRPYjkMXlWk1MMo/AAVA
TQf14mgf9aVEN2m/M5BeYYFJaGr4SwIOyjCZG6uKXohp8a7H
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:32 2024 by rpki-client on console-fra.rpki-client.org